Just to make sure I'm understanding correctly, if you have the mod installed but you didn't launch it on Christmas Day during that window you're fine? Or should I just change my passwords?
That's correct. They put out a pretty specific guideline for risk of being affected and basically if you didn't touch the mod during that time you're fine.